Static task
static1
Behavioral task
behavioral1
Sample
13f4de9b50929eeadf80ae382e4d5bdf_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
13f4de9b50929eeadf80ae382e4d5bdf_JaffaCakes118
-
Size
314KB
-
MD5
13f4de9b50929eeadf80ae382e4d5bdf
-
SHA1
1e77406526f857125e7dc1e451ec66df57a12c70
-
SHA256
6f97fd9dbb05979c6736b41575fe6a2cf4dc2d2070ad7031ef57bc1040a0893b
-
SHA512
27edd51eecbf9bd8f3cbe77686ec27045bc7b65d0c80d5f912fe170ba06c04b7266395a33cee1165a648edd21fe162cc9626729f83c28a8449551586bea77e8e
-
SSDEEP
6144:3455h1Ac5RGffk9NCEqNcrWJYmzGPfsf0b2JcjXufn2fdDykh:i5ocWff0riYmCPXLK2F/h
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 13f4de9b50929eeadf80ae382e4d5bdf_JaffaCakes118
Files
-
13f4de9b50929eeadf80ae382e4d5bdf_JaffaCakes118.exe windows:4 windows x86 arch:x86
a99e22a5b528e0f7350f96fe4857010d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalFindAtomA
GlobalLock
GetCommState
GetStdHandle
lstrcpyn
LocalSize
EnterCriticalSection
LoadLibraryExA
LoadResource
ClearCommBreak
RaiseException
GlobalCompact
ExitThread
DeleteAtom
GetOEMCP
GlobalFree
GetProfileStringA
CloseHandle
GlobalAddAtomA
VirtualAlloc
GetProcessHeap
user32
DrawEdge
AlignRects
ReleaseDC
GetWindowTextA
ShowWindow
GetParent
GetWindowTextLengthA
GetDC
GetClassInfoExA
BeginPaint
CloseWindow
ValidateRect
GetForegroundWindow
GetFocus
IsIconic
GetWindow
GetClassNameA
EndPaint
GetActiveWindow
wsock32
WSASetBlockingHook
WSAGetLastError
WSAStartup
WSACleanup
WSAAsyncGetServByPort
duser
AutoTrace
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ